Security awareness programs can be extremely effective when they are properly implemented. CISOs and security awareness professionals often hear the same frustration about the results of their awareness programs. There is no inherent proof that people are less susceptible to actual phishing messages. In order to have a successful awareness program, there has to be a constant stream of information that is delivered both actively and passively. In some cases, a comprehensive form of gamification can help the organization. The good news is that if you have a program in place, whether it is good or bad, you at least started to create the infrastructure to move things forward.”]
Source: https://www.csoonline.com/article/2906296/what-s-next-for-your-awareness-program.html